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DETAILED ACTION 

1. Claims 1-15 are pending. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-15 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Leung, U.S. Patent No. 6,760,444 and in view of Jari, et al., U.S. Patent Application 
Publication No. 2001/0020275. 

Regarding claim 1, Leung discloses a method for preserving security associations 
between at least two entities includes the steps of: 

maintaining a security association relating to communication between the at least two 
entities in a, table/security-association table (fig. 4), and periodically storing the security 
association in non-volatile storage (col. 4, lines 5-12). Leung lacks or does not 
expressly disclose periodically storing the security association in non-volatile memory. 
However, Jari discloses periodically storing the security association in non-volatile 
storage fl|[0005]). It would have been obvious to one of ordinary skill in the art at the 
time the invention was made to modify the device of Leung with the device of Jari, to 
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periodically storing the security association in non-volatile storage in order restore the 
security association in case of a power failure to as taught by Jari (abstract). 

Regarding claim 2, Leung discloses the method according to claim 1. Leung lacks or 
does not expressly disclose encrypting the security association prior to periodically 
storing the security association in the non-volatile storage. However, Jari discloses 
encrypting the security association prior to periodically storing the security association in 
the non-volatile storage fll[0010]). It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to modify the device of Leung with the device 
of Jari, to encrypt the security association before storing the security association in 
order to ensure secure communication between the network and external users, as 
taught by Jari (abstract). 

Regarding claim 3, Jari further discloses wherein the step of periodically storing 
includes the step of detecting a trigger event (fig. 2, #11). 

Regarding claim 4, Jari further discloses the method according to claim 3 wherein the 
step of detecting a trigger event includes the step of detecting a change in the security 
association (fig. 2, #11). 
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Regarding claim 5, Jari further discloses the method according to claim 1 further 
comprising the step of updating the contents of the table using the security association 
stored in non-volatile storage (fig. 3, #25). 

Regarding claim 6, Leung discloses a method for maintaining security associations 
between a server and a member, the method comprising the steps of: 
generating a security association permitting communication between the server and the 
member (col. 5, lines 5-8); storing the security association in a location available to the 
server (col. 6, lines (49-52); periodically storing the security association in a non-volatile 
memory; and retrieving the security association from the non-volatile memory in the 
event that the security association becomes unavailable to the server. Leung lacks or 
does not expressly disclose encrypting the security association prior to periodically 
storing the security association in the non-volatile storage. However, Jari discloses 
encrypting the security association prior to periodically storing the security association in 
the non-volatile storage fl|[0010]). It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to modify the device of Leung with the device 
of Jari, to encrypt the security association before storing the security association in 
order to ensure secure communication between the network and external users, as 
taught by Jari (abstract). 

Regarding claim 7, Leung discloses the method according to claim 6. Leung lacks or 
does not expressly disclose encrypting the security association prior to periodically 
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storing the security association in the non-volatile storage. However, Jari discloses 
encrypting the security association prior to periodically storing the security association in 
the non-volatile storage fl|[0010]). It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to modify the device of Leung with the device 
of Jari, to encrypt the security association before storing the security association in 
order to ensure secure communication between the network and external users, as 
taught by Jari (abstract). 

Regarding claim 8, Jari further discloses wherein the step of periodically storing the 
security association includes the step of detecting a trigger event (fig. 2, #11). 

Regarding claim 9, Jari further discloses wherein the step of detecting the trigger event 
includes the step of detecting a new security association between the server and the 
member (fl[0002], lines 21-26). 

Regarding claim 10, Leung discloses an apparatus for preserving security associations 
between at least two entities comprises: 

a first table for storing a security association related to communication between the at 
least two ehtities/security-association table (fig. 4). Leung lacks or does not expressly 
disclose a second table for storing at least a portion of the first table and means for 
periodically copying at least a portion of the first table to the second table. However, 
Jari discloses a non-volatile memory including a second table for storing at least a 
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portion of the first table; and means for periodically copying the at least a portion of the 
first table to the second table (1J[0005]). It would have been obvious to one of ordinary 
skill in the art at the time the invention was made to modify the device of Leung with the 
device of Jari, to periodically storing the security association in non-volatile storage in 
order restore the security association in case of a power failure to as taught by Jari 
(abstract). 

Regarding claim 11, Leung discloses the apparatus of claim 10, further comprising 
means for encrypting the at least a portion of the first table prior to copying the at least a 
portion of the first table to the second table. Leung lacks or does not expressly disclose 
encrypting the at least a portion of the first table prior to copying the at least a portion of 
the first table to the second table. However, Jari discloses encrypting the at least a 
portion of the first table prior to copying the at least a portion of the first table to the 
second table (fl[0010] & fig. 2, #14-15). It would have been obvious to one of ordinary 
skill in the art at the time the invention was made to modify the device of Leung with the 
device of Jari, to encrypt the security association before storing the security association 
in order to ensure secure communication between the network and external users, as 
taught by Jari (abstract). 

Regarding claim 12, Jari further discloses means for copying overwriting the at least a 
portion of the first table with contents of the second table (fig. 3, #25). 
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Regarding claim 13, Jari further discloses including encryption logic for encrypting the at 
least a portion of the first table (fig. 2, #14). 

Regarding claim 14, Jari further discloses including decryption logic for decrypting the 
second table (fig. 3, #23). 

Regarding claim 15, Jari further discloses further comprising a key, stored in non- 
volatile memory, for encrypting the at least a portion of the first table fl|[0036]). 

Conclusion 

4. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure 

a. U.S. Patent Application Publication No. 2004/0123153, to Wright et al. 

b. " U.S. Patent No. 7,032,241 to Venkatachary et al. 

c. U.S. Patent Application Publication No. 2004/0044891 to Hanzlik et al. 

d. U.S. Patent No. 7,086,086 to Ellis. 

5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Aubrey H. Wyszynski whose telephone number is 
(571)272-8155. The examiner can normally be reached on Monday - Thursday, and 
alternate Friday's. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571)272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions, on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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GILBERTO BARRON 3JL 
SUPERVISORY PATENT EXAMINER 
TECHNOLOGY CENTER 2100 



